Bots or hackers?

[oldfan]

My ISP is been shutting my VPS down lately due to going over resources. My top processes are forum related I think. see errors below

User Domain % CPU Process

XXXXX XXXXX.com 48.0 /usr/bin/php /home/XXXXXX/public_html/showthread.php

mysql 37.7 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --log-error/var/lib/mysql/XXXXXXX.com.err --open-files-limit10000 --pid-file/var/lib/mysql/XXXXXX.com.pid

Can these process be blocked?
Sorry Im a fool when it comes to this

[Dave]

showthread.php is part of vBulletin.
It's weird though that your ISP is shutting down your VPS, you usually have more control over a VPS. I guess it's time to look for a new host.

[oldfan]

showthread.php is part of vBulletin.
It's weird though that your ISP is shutting down your VPS, you usually have more control over a VPS. I guess it's time to look for a new host.


I dont follow sorry?
I was told it could be bots refreshing pages to try and crack password

[Dave]

What I'm trying to say is that you should move host, I have never encountered a host which shuts down a VPS because you started to use too many resources. Have they ever given you a warning?

Regardless, do you happen to know how many users are browsing your forum at the same time?

[oldfan]

now im getting this from one of the other sites on my VPS

XXX ybowl.com 81.0 /usr/bin/php /home/XXX/public_html/index.php

he says he uploading scripts?

--------------- Added 1452566176 at 1452566176 ---------------

What I'm trying to say is that you should move host, I have never encountered a host which shuts down a VPS because you started to use too many resources. Have they ever given you a warning?

Regardless, do you happen to know how many users are browsing your forum at the same time?

All i get from the ISP is to read logs, unfortunately I have no clue how to do that

[Dave]

Do you have a lot of plugins installed?
How much memory/CPU resources have you been assigned to your VPS?
How many users are there on your forums when this happens?

[oldfan]

Do you have a lot of plugins installed?
How much memory/CPU resources have you been assigned to your VPS?
How many users are there on your forums when this happens?

I have 7 sites on my VPS, and two are vbulletin.

Disk
3.7 GB of 150 GB Used / 106.3 GB Free

Memory:
91% 3.6 GB of 4 GB Used / 363.7 MB Free

Bandwidth:
1% 30 GB of 4.9 TB Used / 4.9 TB Free

Im not sure which site is causing the problems.

Here are my top processes atm

Top Processes
wordpress - XXXX ybowl.com 81.0 /usr/bin/php /home/XXXX/public_html/index.php
wordpress - XXXX ybowl.com 60.0 /usr/bin/php /home/XXXX/public_html/index.php
vbulletin - XXXX metallifukinca.com 48.0 /usr/bin/php /home/XXXX/public_html/showthread.php
vbulletin - XXXX metallifukinca.com 43.0 [php] <defunct>
mysql 37.7 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --log-error/var/lib/mysql/XXXXX.com.err --open-files-limit10000 --pid-file/var/lib/mysql/srv1.metallifukinca.com.pid
mysql 37.6 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --log-error/var/lib/mysql/XXXX.com.err --open-files-limit10000 --pid-file/var/lib/mysql/XXXX.com.pid
mysql 37.5 /usr/sbin/mysqld --basedir/ --datadir/var/lib/mysql --usermysql --log-error/var/lib/mysql/XXXX.com.err --open-files-limit10000 --pid-file/var/lib/mysql/XXXX.com.pid
vbulletin - XXXX metallifukinca.com 36.0 [php] <defunct>
vbulletin - XXXX crosstowntorrents.org 30.0 [php] <defunct>